Takumi Asaki

**Name of the Vulnerable Software and Affected Versions** uim versions prior to 0.4.5.1 **Description** The issue allows local users to gain privileges by exploiting the trust in certain environment variables when libUIM is used in setuid or setgid applications. **Recommendations** For versions prior to 0.4.5.1, update to version 0.4.5.1 or later to resolve the issue.